Getting started with ktls
tech-lists
tech-lists at zyxst.net
Tue Mar 16 17:53:56 UTC 2021
On Sun, Mar 14, 2021 at 08:55:18PM +0000, Rick Macklem wrote:
>Alan explains how to set it up, below.
>However, I thought I'd note that maybe one person has tested KTLS
>on arm64, so you should consider doing this for test purposes only.
>If you do do some testing, please post with your results,
>success or failure.
>
>>It's present in current kernels for both 13 and 14, amd64 and aarch64.
>>However, it's not present in 13's openssl. To use it, you must either
>>rebuild world with WITH_OPENSSL_KTLS=YES in /etc/src.conf,
>Doing it this way means that everything linked to OpenSSL will use
>it. Probably a better testsituation, but expect at least the apache
>server to break. (Most breakage was fixed by a recent patch to the
>serf library, but I think the apache server is still broken.
OK, it's been built and all ports recompiled and reinstalled. Things
that use openssl on this machine are mutt (imaps) lynx (https) and
nginx (https) and py-certbot. They all seem to work. How would I test?
thanks,
--
J.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-current/attachments/20210316/8475f795/attachment.sig>
More information about the freebsd-current
mailing list